This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/EZtw6hEm4-HQ85gMEHMRDpjYxJg.roa File: EZtw6hEm4-HQ85gMEHMRDpjYxJg.roa (raw, json) Hash identifier: JGtJrI2m1JuEfJQglCfJ1ymwyYrm8ObpYBPxT/bs1tE= Subject key identifier: 11:9B:70:EA:11:26:E3:E1:D0:F3:98:0C:10:73:11:0E:98:D8:C4:98 Certificate issuer: /CN=cfcab8c9d217ac3079c3014b18d446e213f19492 Certificate serial: 019B77C6E963CC9C8B0D21FACAB35C22AEB7 Authority key identifier: CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/EZtw6hEm4-HQ85gMEHMRDpjYxJg.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41332 IP address blocks: 185.108.236.0/22 maxlen: 22 185.116.176.0/22 maxlen: 24 194.76.10.0/23 maxlen: 24 2a06:8040::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.mft rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e9:63:cc:9c:8b:0d:21:fa:ca:b3:5c:22:ae:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfcab8c9d217ac3079c3014b18d446e213f19492 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=119b70ea1126e3e1d0f3980c1073110e98d8c498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e3:8a:21:db:06:26:6b:9e:b8:d4:c7:63:3e: 7c:8b:c2:61:e0:48:9d:b1:7b:ee:6d:cb:c6:bb:e0: 37:e2:20:5f:5c:37:56:e3:32:93:6c:46:e7:4b:0a: f7:66:29:7e:35:4d:44:a5:68:ca:2d:67:78:f8:c3: 37:30:0a:b2:05:33:00:d3:66:db:2b:40:3b:f8:98: 0a:4e:86:7c:c4:9b:2d:24:cf:a1:13:d5:49:ef:2c: 0b:16:cd:dc:bd:e1:c2:2b:65:e3:23:37:3e:66:20: 10:91:c8:91:d0:ed:5c:82:17:91:6c:06:a7:d4:e1: 90:83:b2:ce:f3:8e:cd:2e:25:48:b6:e3:9e:bb:24: 79:dc:e1:bc:99:37:7f:e5:fc:49:54:dc:27:91:21: b6:31:4c:d9:43:96:9d:69:5d:2d:d8:0e:26:95:6c: a8:3c:53:1e:68:a7:12:46:c4:35:4f:be:45:d5:b3: 46:14:2c:66:f1:c1:59:95:e0:17:72:63:83:e7:e1: 51:75:54:2b:1c:fa:87:26:52:42:9d:61:ae:38:be: 7d:58:4a:93:97:a4:84:03:5f:98:3b:20:c1:b8:6d: 3c:87:76:fa:cc:9e:a9:9f:cf:81:6b:68:70:9f:ee: cf:ea:8f:79:18:68:e2:ac:11:3e:3e:de:1f:26:73: 9d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9B:70:EA:11:26:E3:E1:D0:F3:98:0C:10:73:11:0E:98:D8:C4:98 X509v3 Authority Key Identifier: keyid:CF:CA:B8:C9:D2:17:AC:30:79:C3:01:4B:18:D4:46:E2:13:F1:94:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8q4ydIXrDB5wwFLGNRG4hPxlJI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/EZtw6hEm4-HQ85gMEHMRDpjYxJg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/10c000-77b0-466d-b4cf-445400d703c8/1/z8q4ydIXrDB5wwFLGNRG4hPxlJI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.108.236.0/22 185.116.176.0/22 194.76.10.0/23 IPv6: 2a06:8040::/29 Signature Algorithm: sha256WithRSAEncryption c5:2a:c2:d4:34:63:d8:c4:aa:3e:44:b7:84:1d:59:83:49:ea: d8:da:64:9c:09:e2:69:1f:cf:29:55:49:cd:0e:64:86:fc:f4: bf:93:02:82:c3:1d:6a:05:f7:23:e5:f3:17:91:ab:bc:ff:35: 5e:f5:52:34:20:8a:3e:1a:3c:98:85:d2:f3:c2:6b:a2:33:ae: c1:48:7b:00:bb:cf:e3:c4:66:19:a8:a9:45:8d:07:05:9f:d5: 17:1b:b1:03:a8:aa:f4:24:00:67:e2:48:8d:d9:4e:2e:c0:c1: 13:28:2f:30:cb:33:d5:35:b9:1f:9d:fc:11:80:2e:c2:18:ea: 85:12:92:8f:b4:a0:4e:7c:f9:bf:8e:7b:6f:c5:89:a5:2e:e5: e4:aa:03:b1:5f:eb:a1:6c:db:b2:69:20:f9:4e:a1:03:45:ae: 05:35:6d:70:0b:c5:e5:ea:5c:df:4c:7e:14:23:fc:d5:a3:e1: fd:5c:7a:d8:99:6a:c0:d0:d0:c1:78:21:f7:c8:3a:db:cb:a0: bf:09:08:3d:46:82:83:ba:4b:5b:6a:f6:ca:49:4a:23:5a:d5: 06:6c:8a:2e:1f:b5:ab:de:1b:77:b9:94:45:95:6a:40:6b:14: 69:e9:a5:98:e0:7e:0d:cb:a2:ae:7c:70:fa:7b:64:b6:cb:11: 75:53:10:97 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt3xuljzJyLDSH6yrNcIq63MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmY2FiOGM5ZDIxN2FjMzA3OWMzMDE0YjE4ZDQ0NmUyMTNm MTk0OTIwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMTliNzBlYTExMjZlM2UxZDBmMzk4MGMxMDczMTEwZTk4ZDhjNDk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+OKIdsGJmueuNTHYz58i8Jh4Eid sXvubcvGu+A34iBfXDdW4zKTbEbnSwr3Zil+NU1EpWjKLWd4+MM3MAqyBTMA02bb K0A7+JgKToZ8xJstJM+hE9VJ7ywLFs3cveHCK2XjIzc+ZiAQkciR0O1cgheRbAan 1OGQg7LO847NLiVItuOeuyR53OG8mTd/5fxJVNwnkSG2MUzZQ5adaV0t2A4mlWyo PFMeaKcSRsQ1T75F1bNGFCxm8cFZleAXcmOD5+FRdVQrHPqHJlJCnWGuOL59WEqT l6SEA1+YOyDBuG08h3b6zJ6pn8+Ba2hwn+7P6o95GGjirBE+Pt4fJnOdKwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBGbcOoRJuPh0POYDBBzEQ6Y2MSYMB8GA1UdIwQY MBaAFM/KuMnSF6wwecMBSxjURuIT8ZSSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhxNHlkSVhyREI1d3dGTEdOUkc0aFB4bEpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMGMwMDAtNzdiMC00NjZkLWI0Y2Yt NDQ1NDAwZDcwM2M4LzEvRVp0dzZoRW00LUhRODVnTUVITVJEcGpZeEpnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xMGMwMDAtNzdiMC00NjZkLWI0Y2YtNDQ1NDAwZDcwM2M4 LzEvejhxNHlkSVhyREI1d3dGTEdOUkc0aFB4bEpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCuWzsAwQC uXSwAwQBwkwKMA0EAgACMAcDBQMqBoBAMA0GCSqGSIb3DQEBCwUAA4IBAQDFKsLU NGPYxKo+RLeEHVmDSerY2mScCeJpH88pVUnNDmSG/PS/kwKCwx1qBfcj5fMXkau8 /zVe9VI0IIo+GjyYhdLzwmuiM67BSHsAu8/jxGYZqKlFjQcFn9UXG7EDqKr0JABn 4kiN2U4uwMETKC8wyzPVNbkfnfwRgC7CGOqFEpKPtKBOfPm/jntvxYmlLuXkqgOx X+uhbNuyaSD5TqEDRa4FNW1wC8Xl6lzfTH4UI/zVo+H9XHrYmWrA0NDBeCH3yDrb y6C/CQg9RoKDuktbavbKSUojWtUGbIouH7Wr3ht3uZRFlWpAaxRp6aWY4H4Ny6Ku fHD6e2S2yxF1UxCX -----END CERTIFICATE-----Generated at Mon Feb 9 23:51:38 2026 by rpki-client